$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa File: 5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa (raw, json) Hash identifier: pY2e8KNnk97s7j2iAHZOM0g6FS/gGeIMbyews+MmGIc= Subject key identifier: A7:09:07:8A:AA:A6:06:19:DE:84:B4:3C:41:22:89:34:5C:01:A4:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC2D718F5DC029AD5B020 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.64.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c2:d7:18:f5:dc:02:9a:d5:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=125cef4a-3b19-45e3-9d44-619f59333a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:69:c8:26:2c:b4:6d:75:14:ee:8e:cb:61: 1b:00:d4:59:92:a0:82:b3:5b:37:c5:db:4b:23:5b: 06:d0:5c:8e:af:da:8a:82:95:0e:84:59:7e:73:21: 6b:21:91:2f:a9:39:bb:fe:28:bd:6c:9c:47:f9:48: a8:13:2c:b3:a5:a8:1a:99:0c:76:8a:dd:71:b1:aa: f8:91:c3:0f:7c:d3:f9:61:c4:a2:78:70:fc:d4:61: 2f:28:f3:90:fe:68:fc:8b:3c:9c:97:5d:fa:b6:f6: a3:41:a3:29:b4:f5:c9:44:48:5d:b4:1b:5c:1b:6c: 92:37:35:bd:6c:4f:a4:5e:39:cf:65:20:e3:53:0a: a2:3b:e0:7d:11:68:47:27:5f:f7:8e:5c:87:2b:64: c3:5a:d9:2c:2e:d3:4e:5c:33:1e:f5:6f:be:33:02: af:90:9e:8e:67:b7:dc:34:ef:eb:8b:48:f7:f1:65: 43:cc:05:b2:62:ed:d6:79:9d:93:6d:48:a2:fa:14: cb:bd:cc:f8:88:6e:e6:b7:d6:94:dc:b1:04:52:b6: 9d:5e:e9:58:b0:9b:98:a4:11:2e:4b:3a:76:ff:ea: 5c:96:59:ba:f9:d0:b6:ca:c8:92:ba:a3:09:69:80: 55:9b:ee:a6:48:f9:69:52:29:0f:c8:68:46:06:ac: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:09:07:8A:AA:A6:06:19:DE:84:B4:3C:41:22:89:34:5C:01:A4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:66:f7:a7:9f:da:4e:40:a2:e2:b5:84:09:a3:3b:1d:d2:b4: c2:5c:3e:76:cc:8a:59:e4:fc:62:9c:b5:54:c0:52:6e:87:07: 7d:6f:e3:6f:a2:2b:f0:50:2d:5d:5f:6a:de:ed:20:84:73:86: 30:54:4d:52:d3:1a:09:c6:2b:4e:a1:e1:f0:23:25:b5:bf:ac: e4:50:60:7e:6b:89:c5:80:85:40:9a:e4:f8:4b:6b:7c:62:26: a0:e4:c6:95:c1:d6:69:1d:35:cf:1e:fe:80:f3:cf:61:01:0e: 8c:52:70:d4:7f:61:f4:1a:f4:cd:6f:25:48:cf:c2:bb:1c:91: f7:83:2f:6f:4f:2e:40:d7:97:0d:13:b6:38:d1:26:c8:b3:77: 17:70:10:e4:5b:94:2a:2e:f3:a8:e8:bb:c5:ca:86:a3:cc:e8: c0:ef:0c:e6:03:f8:f4:b7:db:64:26:6d:64:1d:29:76:e9:04: 3b:19:d2:28:4a:91:83:c4:48:b6:28:6d:f5:63:4e:0e:fe:eb: e9:ab:1f:74:77:31:f4:f8:82:56:b7:ba:6f:81:59:aa:5e:77: e0:d1:c8:7b:89:e9:9d:9e:66:55:99:5e:b5:f0:ca:71:3a:2c: 85:00:07:e2:a6:8e:88:c1:0f:b6:9a:5e:2a:36:c8:ec:0c:40: ec:43:35:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8LXGPXcAprVsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTI1Y2VmNGEtM2IxOS00NWUzLTlkNDQtNjE5ZjU5MzMzYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8ZpyCYstG11FO6Oy2EbANRZkqCCs1s3xdtL I1sG0FyOr9qKgpUOhFl+cyFrIZEvqTm7/ii9bJxH+UioEyyzpagamQx2it1xsar4 kcMPfNP5YcSieHD81GEvKPOQ/mj8izycl136tvajQaMptPXJREhdtBtcG2ySNzW9 bE+kXjnPZSDjUwqiO+B9EWhHJ1/3jlyHK2TDWtksLtNOXDMe9W++MwKvkJ6OZ7fc NO/ri0j38WVDzAWyYu3WeZ2TbUii+hTLvcz4iG7mt9aU3LEEUradXulYsJuYpBEu Szp2/+pcllm6+dC2ysiSuqMJaYBVm+6mSPlpUikPyGhGBqxw7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcJB4qqpgYZ3oS0PEEiiTRcAaT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWJiMzNlZmEtZDYzZC0z MWZjLWE3YjItMWE3ZTlkNGNhZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVm96ef2k5AouK1hAmjOx3StMJcPnbMilnk/GKctVTAUm6HB31v42+i K/BQLV1fat7tIIRzhjBUTVLTGgnGK06h4fAjJbW/rORQYH5ricWAhUCa5PhLa3xi JqDkxpXB1mkdNc8e/oDzz2EBDoxScNR/YfQa9M1vJUjPwrsckfeDL29PLkDXlw0T tjjRJsizdxdwEORblCou86jou8XKhqPM6MDvDOYD+PS322QmbWQdKXbpBDsZ0ihK kYPESLYobfVjTg7+6+mrH3R3MfT4gla3um+BWaped+DRyHuJ6Z2eZlWZXrXwynE6 LIUAB+KmjojBD7aaXio2yOwMQOxDNeQ= -----END CERTIFICATE-----Generated at Tue Apr 8 23:38:58 2025 by rpki-client